Privacy Policy — 55acc

Introduction

This Privacy Policy ("Policy") is issued by the operator of the 55acc platform ("55acc", "the Platform", "we", "us", "our"), accessible at https://55acc.cam. It describes the personal data we collect from users ("you", "Player", "User"), the purposes for which that data is processed, the basis on which it is processed, and the rights available to you in relation to your data.

By registering an account on 55acc or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not register or continue to use the Platform.

55acc is an English-language online betting and live casino platform serving adult players including those in Pakistan. This Policy is drafted in English and all communications regarding data matters will be conducted in English unless otherwise agreed.

Definitions

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, contact details, financial data and device identifiers.
• "Data Controller" — the entity that determines the purposes and means of processing personal data; in this context, the operator of 55acc.
• "Data Processor" — any third party that processes personal data on behalf of the Data Controller in accordance with its instructions.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure and deletion.
• "User" / "Player" — any natural person who registers and uses an account on the Platform.
• "KYC" — Know Your Customer; mandatory identity verification procedures.
• "AML" — Anti-Money Laundering; regulatory procedures to detect and prevent financial crime.
• "Cookies" — small text files stored on a user's device by a web browser to facilitate session management and platform analytics.
• "Platform" — the 55acc website, mobile interface and all associated services.

Data Controller

The Data Controller responsible for personal data collected via the 55acc Platform is the licensed entity operating 55acc under an international gaming license. Specific legal entity details are available upon request by contacting our support team using the contact information set out in Section 16 of this Policy.

Where third-party service providers (payment processors, identity verification services, analytics providers) act as Data Processors on our behalf, they do so subject to data processing agreements that require them to handle personal data in accordance with applicable data protection standards.

Personal Data We Collect

55acc collects the following categories of personal data from users:

Identity & Contact Data

• Full name as it appears on an official government-issued document.
• Date of birth (used for mandatory age verification).
• Residential address, including city (Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and others).
• Email address and mobile phone number.
• National identity number (CNIC) or passport number where required for KYC.

Financial & Transaction Data

• Deposit and withdrawal history, including transaction amounts in PKR.
• Payment method details (e.g., account identifiers for bank transfer channels; wallet references for mobile payment services used as payment references).
• Betting history — markets wagered on, stake amounts and outcomes.
• Bonus and promotion activity.

Technical & Usage Data

• IP address, browser type and version, operating system and device type.
• Session logs, page views and navigation patterns on the Platform.
• Cookies and similar tracking data as described in Section 11.
• Login timestamps and geolocation data derived from IP address.

KYC Documentation

• Copies of government-issued identity documents (CNIC, passport, driving licence).
• Proof of address documents where required.
• Source-of-funds documentation where required under AML procedures.

Communications Data

• Records of communications between you and 55acc support (live chat transcripts, email correspondence).
• Voluntary information you provide in support requests or feedback.

How Personal Data Is Collected

Personal data is collected through the following means:

• Account registration — information you provide when creating your account.
• KYC verification — documents you submit to verify your identity and age.
• Deposits and withdrawals — transaction data generated when you use the cashier.
• Betting activity — data generated automatically when you place wagers.
• Platform usage — technical data collected automatically via cookies and server logs.
• Support interactions — data you voluntarily provide when contacting our support team.
• Third-party verification providers — identity and fraud-screening data obtained from regulated third-party KYC/AML service providers.

Data Processing & Use

55acc processes personal data for the following specific and legitimate purposes:

Legal Basis for Processing

55acc processes personal data on the following legal bases, depending on the purpose and applicable regulatory framework:

• Contractual necessity — processing required to create and manage your account, process transactions and provide the services described in our Terms & Conditions.
• Legal obligation — processing required to comply with KYC, AML, licensing conditions and other legal or regulatory obligations applicable to the Operator.
• Legitimate interests — processing for fraud prevention, platform security, responsible gambling monitoring and service improvement, where those interests are not overridden by your data protection rights.
• Consent — processing for marketing communications, where your explicit opt-in consent has been obtained and can be withdrawn at any time.

Third-Party Data Sharing

55acc does not sell your personal data to third parties. We may share your data with third parties only in the following circumstances:

• Service providers acting as Data Processors — including KYC/AML verification providers, payment processing intermediaries, fraud detection services, IT infrastructure providers and customer support platforms. These parties process data strictly on our instructions under binding data processing agreements.
• Regulatory and law enforcement authorities — where required by applicable law, a court order, or a legitimate request from a competent regulatory or law enforcement body.
• Licensing authorities — where our gaming license jurisdiction requires us to submit player data as part of regulatory compliance or audit procedures.
• Business transfers — in the event of a merger, acquisition or sale of the Platform, personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

Data Retention

55acc retains personal data for no longer than is necessary for the purposes set out in this Policy, or as required by applicable law and regulatory obligations. The following general principles apply:

• Active account data — retained for the duration of your account's active status plus any mandatory post-closure retention period required by the operator's license jurisdiction.
• KYC and AML records — typically retained for a minimum of five (5) years following the closure of your account, or longer where required by applicable law. This is a regulatory obligation that cannot be waived upon a deletion request.
• Transaction records — retained for the period required by applicable financial and gaming regulations in the license jurisdiction.
• Marketing data — retained until you withdraw your consent or for a maximum of two (2) years of account inactivity, whichever is earlier.
• Support communications — retained for a reasonable period sufficient to resolve disputes and maintain service quality records.

Security Measures

55acc employs technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS/HTTPS encryption for all data transmitted between your browser and the Platform.
• Encryption of sensitive data fields at rest within our database systems.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability monitoring.
• Incident response procedures for identifying, containing and reporting data breaches.

While we implement robust security practices, no transmission over the internet or electronic storage system is entirely risk-free. You are responsible for keeping your account credentials confidential and for using a secure, private connection when accessing the Platform.

Cookies & Tracking Technologies

55acc uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

Essential Cookies

Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during a browsing session and security cookies that help detect fraudulent activity. These cookies cannot be disabled without disrupting Platform functionality.

Performance & Analytics Cookies

Used to collect anonymous or pseudonymous information about how users interact with the Platform — for example, which pages are visited most frequently and where errors occur. This data is used solely to improve Platform performance and user experience.

Preference Cookies

Used to remember your settings and preferences — for example, your display language, time-zone preference (PKT / UTC+5) and any responsible gambling tool configurations you have applied to your account.

Marketing Cookies

Used only where you have provided explicit consent and only to personalise promotional content shown within the 55acc Platform. We do not deploy third-party advertising cookies that track your activity across unrelated websites.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. For persistent cookie-related queries, contact our support team.

User Rights

Subject to the legal basis on which your data is processed and any applicable regulatory obligations (including KYC/AML retention requirements), you have the following rights in relation to your personal data:

• Right of Access — you have the right to request a copy of the personal data we hold about you.
• Right to Rectification — you have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure — you may request deletion of your personal data where we no longer have a legal basis to retain it. Note that KYC and AML records are subject to mandatory retention periods that override erasure requests.
• Right to Restriction — you may request that we restrict processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to Data Portability — where processing is based on consent or contractual necessity, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object — you may object to processing based on legitimate interests, including profiling, in certain circumstances.
• Right to Withdraw Consent — where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 16. We will respond to verified requests within a reasonable timeframe, typically within 30 days of receipt. We may need to verify your identity before processing a rights request to protect against unauthorised access to another person's data.

Protection of Minors

The 55acc Platform is strictly for adults aged 18 years and above, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.

Mandatory age verification (KYC) is performed for all accounts before any withdrawal is processed. If we discover that an account has been registered by a minor, we will immediately close the account, delete the associated personal data to the extent permitted by law, and handle any funds in accordance with the operator's procedures and applicable regulations.

Parents and guardians who have reason to believe that a minor has registered an account on 55acc should contact our support team immediately.

International Data Transfers

As an internationally licensed platform serving users globally including in Pakistan, personal data collected by 55acc may be stored and processed in jurisdictions outside Pakistan. Such transfers are necessary for the provision of our services and are carried out in accordance with applicable data protection requirements in our license jurisdiction.

Where personal data is transferred to third-party service providers located in other countries, we ensure that appropriate safeguards are in place — for example, through contractual clauses or by selecting processors operating under comparable data protection standards.

Policy Amendments

55acc reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law or regulatory requirements. When material changes are made, we will endeavour to notify registered users — for example, by displaying a prominent notice on the Platform or by sending an email to the address on your account.

The date shown at the top of this Policy reflects when it was last updated. We recommend reviewing this page periodically. Your continued use of the Platform after any update constitutes acceptance of the revised Policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how your personal data is being handled, please contact the 55acc data team through the following channels:

• Email: support@55acc.cam (plain text — do not send sensitive documents via email)
• Live Chat: Available 24/7 via the in-platform chat widget
• Response time: Within 2 hours during standard hours (PKT, UTC+5); data rights requests within 30 days